ATCExpressRouteCircuitIpfix

This table has Express Route Circuit IPFIX flow records. Flow records are captured and emitted by Azure Traffic Collector (ATC).

Table attributes

Attribute	Value
Resource types	microsoft.networkfunction/azuretrafficcollectors
Categories	Azure Resources
Solutions	LogManagement
Basic log	No
Ingestion-time transformation	No
Sample Queries	-

Columns

Column	Type	Description
ATCRegion	string	Azure Traffic Collector (ATC) deployment region.
ATCResourceId	string	Azure resource ID of Azure Traffic Collector (ATC).
BgpNextHop	string	Border Gateway Protocol (BGP) next hop as defined in the routing table.
_BilledSize	real	The record size in bytes
DestinationIp	string	Destination IP address.
DestinationPort	int	TCP destination port.
Dot1qCustomerVlanId	int	Dot1q Customer VlanId.
Dot1qVlanId	int	Dot1q VlanId.
DstAsn	int	Destination Autonomous System Number (ASN).
DstMask	int	Mask of destination subnet.
DstSubnet	string	Destination subnet of destination IP.
ExRCircuitDirectPortId	string	Azure resource ID of Express Route Circuit's direct port.
ExRCircuitId	string	Azure resource ID of Express Route Circuit.
ExRCircuitServiceKey	string	Service key of Express Route Circuit.
FlowRecordTime	datetime	Timestamp (UTC) when Express Route Circuit emitted this flow record.
Flowsequence	long	Flow sequence of this flow.
IcmpType	int	Protocol type as specified in IP header.
IpClassOfService	int	IP Class of service as specified in IP header.
IpProtocolIdentifier	int	Protocol type as specified in IP header.
IpVerCode	int	IP version as defined in the IP header.
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is false ingestion isn't billed to your Azure account
MaxTtl	int	Maximum time to live (TTL) as defined in the IP header.
MinTtl	int	Minimum time to live (TTL) as defined in the IP header.
NextHop	string	Next hop as per forwarding table.
NumberOfBytes	long	Total number of bytes of packets captured in this flow.
NumberOfPackets	long	Total number of packets captured in this flow.
OperationName	string	The specific Azure Traffic Collector (ATC) operation that emitted this flow record.
PeeringType	string	Express Route Circuit peering type.
Protocol	int	Protocol type as specified in IP header.
_ResourceId	string	A unique identifier for the resource that the record is associated with
SchemaVersion	string	Flow record schema version.
SourceIp	string	Source IP address.
SourcePort	int	TCP source port.
SourceSystem	string	The type of agent the event was collected by. For example, OpsManager for Windows agent, either direct connect or Operations Manager, Linux for all Linux agents, or Azure for Azure Diagnostics
SrcAsn	int	Source Autonomous System Number (ASN).
SrcMask	int	Mask of source subnet.
SrcSubnet	string	Source subnet of source IP.
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TcpFlag	int	TCP flag as defined in the TCP header.
TenantId	string	The Log Analytics workspace ID
TimeGenerated	datetime	Timestamp (UTC) when the Azure Traffic Collector (ATC) emitted this flow record.
Type	string	The name of the table